Repository navigation

Stage 3: container modules including k3s - #22

Draft

VectoDE wants to merge 30 commits into

feat/lss-2from

feat/lss-3

Draft

Stage 3: container modules including k3s#22
VectoDE wants to merge 30 commits into
feat/lss-2from
feat/lss-3

Commits on Oct 14, 2026
- feat(container): container library, container firewall and trusted networks
  
  VectoDE
  and
  claude
  committed
  0eca10b
- feat(container): docker and podman modules
  
  VectoDE
  and
  claude
  committed
  e7d50eb
- feat(container): k3s and portainer modules
  
  VectoDE
  and
  claude
  committed
  3e21b71
- fix(container): fail closed on host paths and symlinks
  
  VectoDE
  and
  claude
  committed
  10fc3b4
- fix(firewall): bind trusted networks to their interface and reject broad ranges
  
  VectoDE
  and
  claude
  committed
  65ba9e0
- feat(guard): daily Trivy scan of the container images
  
  VectoDE
  and
  claude
  committed
  461c9d4
- test(container): container firewall, engines, Compose, Trivy and module metadata
  
  VectoDE
  and
  claude
  committed
  77e0bf8
- feat(profiles): k8s-node profile; docker and portainer in all
  
  VectoDE
  and
  claude
  committed
  46bfa8a
- ci(integration): podman in containers, docker, portainer and k3s in VMs
  
  VectoDE
  and
  claude
  committed
  a575151
- docs: container modules, container firewall and k8s-node profile
  
  VectoDE
  and
  claude
  committed
  2e3ebe8
- style: ShellCheck and shfmt findings in the guard scan and trust tests
  
  VectoDE
  and
  claude
  committed
  f723c3d
- Merge feat/lss-2 into feat/lss-3
  
  VectoDE
  and
  claude
  committed
  6d66c98
- test(integration): show containers, their logs and listening ports when a run fails
  
  VectoDE
  and
  claude
  committed
  07101de
- fix(container): give the volumes of the socket container to root
  
  VectoDE
  and
  claude
  committed
  c2d0ff1
- Merge feat/lss-2 into feat/lss-3
  
  VectoDE
  and
  claude
  committed
  bb2979b
- fix(container): check dockerd's configuration for TCP instead of its sockets
  
  VectoDE
  and
  claude
  committed
  4a4c4a4
- Merge feat/lss-2 into feat/lss-3
  
  VectoDE
  and
  claude
  committed
  057dba6
- fix(docker): use the nftables backend where the kernel lacks xt_addrtype
  
  VectoDE
  and
  claude
  committed
  bbb88c8
- Merge feat/lss-2 into feat/lss-3
  
  VectoDE
  and
  claude
  committed
  0e96548
- fix(docker): drop other forwarding where lss turns it on for Docker
  
  VectoDE
  and
  claude
  committed
  20ff382
- fix(docker): load br_netfilter where dockerd uses nftables
  
  VectoDE
  and
  claude
  committed
  bf1fb2c
- Merge feat/lss-2 into feat/lss-3
  
  VectoDE
  and
  claude
  committed
  f7b8bc0
- fix(docker): install the netfilter modules instead of switching to nftables
  
  VectoDE
  and
  claude
  committed
  6e189a3
- Merge remote-tracking branch 'origin/feat/lss-2' into feat/lss-3
  VectoDE
  committed
  849c248
Commits on Oct 15, 2026
- fix(docker): install kernel-modules-extra for the running kernel on EL10
  
  VectoDE
  and
  claude
  committed
  2f46779
- Merge remote-tracking branch 'origin/feat/lss-2' into feat/lss-3
  VectoDE
  committed
  0121191
- Merge remote-tracking branch 'origin/feat/lss-2' into feat/lss-3
  VectoDE
  committed
  1e8fbe9
- fix(k3s): wait for the secrets encryption status
  
  VectoDE
  and
  claude
  committed
  1f3af33
- Merge remote-tracking branch 'origin/feat/lss-2' into feat/lss-3
  VectoDE
  committed
  3004f59
- Merge remote-tracking branch 'origin/feat/lss-2' into feat/lss-3
  VectoDE
  committed
  180b53a

Commits

Commits on Oct 14, 2026

Commits on Oct 15, 2026